There are such permissions already. For example "systemXHR", "tcp-socket" or "browser". See https://developer.mozilla.org/en-US/Apps/Build/App_permissions
However, it's true that whether an app is using this permission is not advertised to the user. I am developing an app that uses the "systemXHR", "browser" and "geolocation" permissions. Of these, only the last one is advertised when I use the app. It's also the only one that is listed if I visit "Settings > App Permissions" and click on my app. So at the moment, the only way to reliably know what permissions are used by the app is to visually check the manifest. This is unfortunately not an option for end users. Same as you, I'd like to see more information on what apps can do or can't when you install and use them. On 14 May 2014 20:27, Sonny Piers <[email protected]> wrote: > Hello, > > Android (does iOS too?) has a simple thing guarantying user's privacy that > the WebApp platform lacks. > The internet permission. > > I've been thinking about that for a while and I finally decided to post > after someone shared the same concern on reddit: > http://www.reddit.com/r/FireFoxOS/comments/25fimw/how_ > can_you_tell_if_firefox_marketplace_apps/ > > It doesn't only make sense from a user point of view. As a publisher, > preventing my application from using the internet is a simple way to > reassure my users about their privacy. > > Of course it's non trivial because the Web platform relies on internet > connectivity, however I believe it's possible and worth talking about it. > > As I see it, the internet permission would be required for any usage of: > - PeerConnection > - WebSocket > - XMLHttpRequest > - loading remote resources (<script>, <style>...) > - anything else? > > Of course it would only makes sense for privileged apps. An internet > permission would break plain packaged apps. > > But how to advert the user an application 'might' use the internet > connectivity? > - The permission could be requested when the user open the plain packaged > application and before the application launches. > -The ability for the publisher/developer to opt-out the internet > permission in which case any internet connectivity related API would fail. > _______________________________________________ > dev-webapps mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-webapps > -- Pablo Brasero Moreno [email protected] _______________________________________________ dev-webapps mailing list [email protected] https://lists.mozilla.org/listinfo/dev-webapps
